Elastic Security
Import endpoint metadata & cases from Elastic Security
Category: Security & Threat Intel · Authentication: Username & password
Connecting your account
Kibana → Stack Management → API Keys → Create API key, or use a basic-auth user with Elastic Security access.
Credentials needed
| Field | Required | Notes |
|---|---|---|
| Kibana URL | Yes | e.g. e.g. https://mydeployment.kb.us-central1.gcp.cloud.es.io:9243 |
| Username | Yes | |
| Password | Yes |
Available data to import
Once connected, choose from these resources when setting up an import:
| Resource | What it imports |
|---|---|
| Endpoint metadata | All endpoint metadata records |
| Cases | All cases records |
| Case comments | All case comments records (you'll be asked to pick a case) |
This page is generated from Brooked's connector definition for elastic-security. Found an error? Open an issue or send a PR.